EP2254305A1 - Verfahren und Vorrichtung für pseudogeheime Schlüsselgenerierung zur Generierung einer Antwort auf eine von einem dienstanbieter empfangene Anfrage - Google Patents

Verfahren und Vorrichtung für pseudogeheime Schlüsselgenerierung zur Generierung einer Antwort auf eine von einem dienstanbieter empfangene Anfrage Download PDF

Info

Publication number
EP2254305A1
EP2254305A1 EP10176421A EP10176421A EP2254305A1 EP 2254305 A1 EP2254305 A1 EP 2254305A1 EP 10176421 A EP10176421 A EP 10176421A EP 10176421 A EP10176421 A EP 10176421A EP 2254305 A1 EP2254305 A1 EP 2254305A1
Authority
EP
European Patent Office
Prior art keywords
sequence number
secret key
pseudo
subscriber station
generate
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP10176421A
Other languages
English (en)
French (fr)
Inventor
Gregory Gordon Rose
Roy Franklin Quick
John Wallace Nasielski
James Semple
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Qualcomm Inc
Original Assignee
Qualcomm Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Qualcomm Inc filed Critical Qualcomm Inc
Publication of EP2254305A1 publication Critical patent/EP2254305A1/de
Withdrawn legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0853—Network architectures or network communication protocols for network security for authentication of entities using an additional device, e.g. smartcard, SIM or a different communication terminal
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/06—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
    • H04L9/065—Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3
    • H04L9/0656—Pseudorandom key sequence combined element-for-element with data sequence, e.g. one-time-pad [OTP] or Vernam's cipher
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04M—TELEPHONIC COMMUNICATION
    • H04M3/00—Automatic or semi-automatic exchanges
    • H04M3/16—Automatic or semi-automatic exchanges with lock-out or secrecy provision in party-line systems
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/041—Key generation or derivation
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
    • H04W12/0431—Key distribution or pre-distribution; Key agreement
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
    • H04W12/0433—Key management protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H04W12/069—Authentication using certificates or pre-shared keys
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W92/00—Interfaces specially adapted for wireless communication networks
    • H04W92/04—Interfaces between hierarchically different network devices
    • H04W92/10—Interfaces between hierarchically different network devices between terminal device and access point, i.e. wireless air interface
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W92/00—Interfaces specially adapted for wireless communication networks
    • H04W92/04—Interfaces between hierarchically different network devices
    • H04W92/12—Interfaces between hierarchically different network devices between access points and access point controllers

Definitions

  • the present disclosure relates generally to wireless telecommunications, and more specifically, to security in wireless telecommunications.
  • the Third Generation Partnership Project (3GPP) is in the process of standardizing a mechanism to do this, based on their Authentication Key Agreement (AKA) protocol.
  • AKA Authentication Key Agreement
  • the 3GPP is a collaboration agreement that brings together a number of telecommunications standards for the purpose of developing global specifications for the Global System for Mobile Communications (GSM).
  • GSM Global System for Mobile Communications
  • ETSI European Telecommunications Standard Institute
  • the Third Generation Partnership 2 (3GPP2) is also a collaboration agreement representing North America and Asian interests. It was established to develop global specifications for ANSI/TIA/EIA-41 networks supporting analog, Time Division Multiple Access (TDMA), and Code Division Multiple Access (CDMA). While the 3GPP2 has officially adopted AKA, there has been some resistance to deploying AKA, and in some instances, an effort to promote the continued use of the Cellular Authentication and Voice Encryption (CAVE) legacy protocol, despite known weaknesses in CAVE. Probably, the biggest single problem with CAVE is that its master key is only 64-bits. This is not considered adequate security for current and future applications. At the same time, there are backward compatibility issues with the deployment of AKA, particularly when the wireless device incorporates a User Identity Module (UIM) supporting the CAVE algorithm.
  • UIM User Identity Module
  • this technology should be cryptographically proven, such as AKA.
  • a subscriber station includes a processing system having first and second security protocols, the processing system being configured to use the first security protocol to generate a pseudo-secret key from a challenge received from a service provider, and use the second security protocol to generate a response to the challenge from the pseudo-secret key.
  • a method secured communications includes receiving a challenge from a service provider, using a first security protocol to generate a pseudo-secret key from the challenge, and using a second security protocol to generate a response to the challenge from the pseudo-secret key.
  • FIG. 1 is a conceptual block diagram illustrating an example of a telecommunications system
  • FIG. 2 is a functional block diagram illustrating an example of a standardized CAVE algorithm to support communications over a telecommunications system
  • FIG. 3 is a functional block diagram illustrating an example of an Authentication Center generating a pseudo-secret key using a CAVE algorithm
  • FIG. 4 is a functional block diagram illustrating an example of an Authentication Center using a pseudo-secret key to generate an authentication vector
  • FIG. 5 is a functional block diagram illustrating an example of a challenge/response transaction between a subscriber station and a Mobile Switching Center
  • FIG. 6 illustrates an example method for secured communications.
  • CDMA Code Division Multiple Access
  • CDMA is a modulation and multiple access scheme based on spread-spectrum communications and is well known in the art. While the encryption mechanisms described throughout this disclosure may be well suited for use in a CDMA telecommunications system, those skilled in the art will readily appreciate that these techniques are likewise applicable to other wireless networks. Accordingly, any reference to a CDMA telecommunications system is intended only to illustrate various inventive aspects of the present invention, with the understanding that these inventive aspects have a wide range of applications.
  • FIG. 1 is a conceptual block diagram illustrating an example of a telecommunications system.
  • a user may communicate with a wired subsystem 102 on a subscriber station 104.
  • the wired subsystem 102 may include a circuit-switched network 106, such as the Public Switched Telephone Network (PSTN), and/or a packet-switched network 108, such as the Internet or a corporate intranet.
  • PSTN Public Switched Telephone Network
  • the subscriber station may be a phone, personal digital assistant (PDA), a laptop, a computer, a game console, a pager, a camera, instrumentation, or any other type of mobile terminal.
  • PDA personal digital assistant
  • the subscriber station 104 may include a transceiver 109 to support radio communications with a wireless subsystem 114.
  • a processing system 108 may be used to provide various signal processing functions.
  • the processing system 108 may include a processor 110 integrated into the subscriber station 104, and a UIM 112 with its own processor (not shown).
  • the UIM 112 may or may not be removable from the subscriber station 104.
  • a removable UIM is often referred to in the art as a R-UIM. In either case, the UIM 112 is generally designed to be tamper-resistant and capable of a reasonable level of protection for encryption keys.
  • the wireless subsystem 114 may be used to support communication between the subscriber station 104 and the circuit-switched and/or packet switched networks 106, 108.
  • a Mobile Switching Center (MSC) 116 is shown as the service provider in this example, providing access to the circuit-switch network 106 and/or the packet-switched network 108 via an Interworking Function (IWF) 118.
  • IWF Interworking Function
  • any service provider may be used to interface the subscriber station 104 to the wired subsystem 102. Accordingly, all authentication and encryption procedures described throughout this disclosure with reference to the MSC 116 are equally applicable to any service provider in the wireless subsystem 114.
  • the wireless subsystem also includes a Base Station Controller (BSC) 118, which controls one or more Base Station Transceivers (BTS) through the allocation and management of radio resources.
  • BSC Base Station Controller
  • BTS Base Station Transceivers
  • Each BTS includes one or more transceivers placed at a single location to provide radio coverage throughout the entire wireless subsystem 114.
  • a single BTS 120 is shown in communication with the subscriber station 104.
  • the wireless subsystem 114 may also include a Home Location Register (HLR) 122.
  • the HLR 122 may be used to maintain a record of valid subscribers for various service providers.
  • the HLR 122 also maintains all subscriber information, such as the Electronic Serial Number (ESN), the phone number of the subscriber station, the current location of the subscriber station, etc..
  • ESN Electronic Serial Number
  • the HLR 122 may be co-located with the MSC 116, be an integral part of the MSC 116, or be independent of the MSC 116.
  • One HLR can serve multiple MSCs, or an HLR may be distributed over multiple locations.
  • the HLR 122 will be coupled with an Authentication Center (AC) 124.
  • AC Authentication Center
  • a Visitor Location Register (VLR) 126 is normally coupled with the MSC 116.
  • the VLR 126 maintains a register of visiting subscriber stations operating within the coverage area of the BTSs connected to the MSC 116.
  • the VLR 126 serves as a local cache of HLR subscriber information for quick and easy access.
  • the MSC 116 retrieves the subscriber station information from the HLR 122 and places it into the VLR 126.
  • FIG. 2 is a functional block diagram illustrating an example of a standardized CAVE algorithm to support communications over the wireless subsystem.
  • the security protocols rely on a 64-bit secret key (A-Key) and the ESN of the subscriber station 104.
  • a random binary number called RAND which is generated in the AC 124, also plays a role in the authentication procedures.
  • the A-Key is programmed into the UIM 112 in the subscriber station 104 and is stored in the AC 124.
  • the A-Key is used to generate session keys for voice and data encryption.
  • the authentication process begins with the generation of a 128-bit secondary key called the "Shared Secret Data" (SSD) at the AC 124 and the subscriber station.
  • SSD Shared Secret Data
  • a RAND generator 202 is used to generate a RAND which, along with the A-key and the subscriber station's ESN, are input to a CAVE algorithm 204 to generate the SSD.
  • the RAND is also sent to the UIM 112 so that the SSD can be generated at the subscriber station 104.
  • the RAND, the A-key, and the ESN are input to a similar CAVE algorithm 206 to generate the SSD.
  • the SSD is provided from the AC 124 to the MSC 116 serving the area in which the subscriber station 104 resides.
  • the SSD may be shared with MSC's in other service areas to allow local authentication of a roaming subscriber station 104.
  • the SSD may be used by the MSC 116 to support a challenge/response authentication procedure.
  • the MSC 116 generates a random challenge (Broadcast RAND) with a Broadcast RAND generator 208.
  • the Broadcast RAND is provided to the UIM 112 in the subscriber station 104.
  • the UIM 112 uses the Broadcast RAND and the SSD as input to a CAVE algorithm 210 to generate an authentication signature, i.e., a response to the challenge.
  • This signature is then used by the MSC 116 to authenticate the subscriber station 104 by comparing 214 the signature to the output of a similar CAVE algorithm 212 applied to the Broadcast RAND and the SSD from the AC 124.
  • secure communications may be realized with an AKA protocol using the CAVE credentials in the UIM 112.
  • the AKA protocol provides enhanced security over CAVE.
  • the use of the CAVE credentials provides backward compatibility with the legacy equipment currently deployed in the field.
  • the AKA procedure is performed in two stages.
  • the first stage involves the transfer of security credentials from the AC 124 to either the MSC 116 or some other service provider in the wireless subsystem responsible for setting up the connections with the subscriber station 104.
  • the security credentials consist of an ordered array of authentication vectors (AV).
  • the authentication vectors AV include challenge/response authentication data and cryptographic keys.
  • the second stage involves a one-pass challenge/response transaction between the subscriber station 104 and the MSC 116 to achieve mutual authentication.
  • the authentication vectors AV are derived by the AC 124 from a 128-bit secret key (K) known only by the AC 124 and the UIM 112.
  • K 128-bit secret key
  • the UIM 112 employs CAVE security credentials, and therefore, does not have a secret AKA key K.
  • a pseudo-secret key (PK) is used.
  • the pseudo-secret key (PK) may be created from information provided by the UIM 112 to the processor 110 (see FIG. 1 ).
  • the pseudo-secret key PK may be created from one of the session keys generated by the CAVE algorithm 210 in the UIM 112. Any session key may be used, but it is believed that the Signaling Message Encryption key (SMEKEY) is a good choice because it is more difficult to recover by an eavesdropper.
  • SMEKEY Signaling Message Encryption key
  • FIG. 3 is a functional block diagram illustrating one example of how the pseudo-secret key PK may be derived in the AC 124.
  • the generation of the pseudo-secret key (PK) begins with the creation of a 128-bit AKA RAND for the authentication vector (AV).
  • the 128-bit AKA RAND may be generated from a AKA RAND generator 302.
  • the first 32-bits of the AKA RAND may be used as a CAVE challenge.
  • the first 32-bits of the AKA RAND, along with the SSD, may be input to a CAVE algorithm 304 to generate an authentication signature (RES1) and a SMEKEY (SMEKEY1).
  • RES1 authentication signature
  • SMEKEY SMEKEY
  • the SMEKEY may be combined with the second 32-bits of the AKA RAND using an XOR function 306 to be used as the second CAVE challenge.
  • the second CAVE challenge produces a second authentication signature (RES2) and a second SMEKEY (SMEKEY2). This process may be repeated any number of times to produce any number of signatures and SMEKEYs.
  • a hash function 308 may then be used to combine the signatures and SMEKEYs to form the pseudo-secret key PK.
  • FIG. 4 is a functional block diagram illustrating an example of an AC that uses a pseudo-secret key PK to generate authentication vectors AV to support an AKA protocol.
  • Each authentication vector AV includes a random challenge, i.e., an AKA RAND from the AKA RAND generator 302, an expected response (XRES), a cipher key (CI), an integrity key (IK), and an authentication token (AUTN).
  • the authentication token AUTN includes a message authentication code (MAC) and an encrypted sequence number SQN.
  • the sequence number SQN is produced by a counter 402 that is increased by one for each subsequent authentication vector AV generated by the AC 124.
  • the MAC is used by the subscriber station 104 to authenticate the MSC 116, or any other service provider, and the SQN is used to ensure that the authentication vector AV is not being replayed by an attacker.
  • the AC 124 uses a number of cryptographic functions to generate the authentication vectors AV. These functions may include f1-f5, f11, and other cryptographic function as defined by the appropriate standards and well known in the art.
  • the network operators are generally free to choose any algorithm they want provided it complies with the function input/output specifications set forth in 3G TS 33.105, 3G Security; Cryptographic Algorithm Requirements.
  • the first cryptographic function f0 is used to derive the MAC from the pseudo-secret key PK and the sequence number SQN.
  • the remaining cryptographic functions f1-f5 are used to derive the expected response to the challenge XRES, the cipher key CK, the integrity key IK, and an anonymity key (AK), respectively, from the pseudo-secret PK and the AKA RAND.
  • the anonymity key AK is used to encrypt the sequence number SQN in the authentication token AUTN.
  • FIG. 5 is a functional block diagram illustrating an example of a challenge/response transaction between the subscriber station 104 and the MSC 116.
  • the MSC 116 selects the next authentication vector (AV) from the ordered array and sends the AKA RAND and the authentication token AUTN to the subscriber station 104.
  • the pseudo-secret key PK must be generated in the same manner it was generated at the AC 124.
  • the processor 110 provides the first 32-bits of the AKA RAND from the authentication vector AV to the UIM 112 as the CAVE challenge.
  • the UIM 112 has a CAVE algorithm 502 that produces an authentication signature and a SMEKEY from the CAVE challenge and the SSD.
  • the process may be repeated with the resulting SMEKEY at the end of each operation being combined with a portion of the AKA RAND through an XOR function 504 to form the CAVE challenge for the next operation.
  • the process is repeated the same number of times as it is done in the AC 124 to produce the same number of authentication signatures and SMEKEYs.
  • the authentication signatures and SMEKEYs are combined with a hash algorithm 506 to produce the pseudo-secret key PK.
  • the pseudo-secret key PK may be used with the AKA protocol.
  • the pseudo-random key PK may be used, along with the AKA RAND from the authentication vector AV, to derive the anonymity key (AK) using the f5 function.
  • the sequence number SQN from the authentication token AUTN can then be decrypted with the anonymity key AK through an XOR operation 506.
  • the decrypted sequence number SQN, along with the pseudo-secret key PK may then be used to derive the expected message authentication code (XMAC) using the f1.
  • the MAC from the authentication token AUTN and the XMAC may then be input to a comparator 508. If they are different, the processor 110 sends an error message back to the MSC 116 and abandons the authentication procedure.
  • the next step in the process is to verify that the decrypted sequence number SQN is correct.
  • the decrypted sequence number SQN and a locally generated SQN from a counter 510 may be input to a comparator 512. If the decrypted sequence number SQN is incorrect, the processor 110 sends an error message back to the MSC 124. In response to the error message, the MSC 116 may initiate a resynchronization process between the counters in the AC 124 and the processor 110.
  • the session keys may then be generated.
  • the cipher key CK and the integrity key IK may be derived from the AKA RAND and the pseudo-secret key PK using the f3 and f4 functions.
  • the processor 110 also generates a response (RES) to the AKA RAND and the pseudo-secret key PK using the f2 function.
  • the response RES is sent to the MSC 116.
  • the MSC compares 514 the response RES from the processor 110 with the expected response XRES contained in the authentication vector AV. If the RES equals the XRES, then the subscriber station has been authenticated.
  • the MSC 116 may select the appropriate cipher key CI and integrity key IK from the selected authentication vector AV to begin secured communications. If, however, the RES is different from the XRES, the MSC 116 may send an error message back to the AC 124. The MSC 116 may also decide to initiate a new authentication procedure with the subscriber station 104.
  • Enhanced security may be achieved by using a standard Diffie-Hellman key agreement protocol between the subscriber station 104 and the MSC 116 to negotiate a 128-bit temporary key (TK).
  • the temporary key (TK) may then be provided by the MSC 116 to the AC 124.
  • the temporary key (TK) may then be included in the hash function at both the AC 124 and processor 110 to derive the pseudo-secret key PK.
  • FIG. 6 shows an example method for secured communications.
  • a challenge is received from a service provider.
  • a first security protocol is then used to generate (620) a pseudo-secret key from the challenge.
  • a second security protocol is used to generate (630) a response to the challenge from the pseudo-secret key.
  • DSP digital signal processor
  • ASIC application specific integrated circuit
  • FPGA field programmable gate array
  • a general-purpose processor may be a microprocessor, but in the alternative, the processor may be any conventional processor, controller, microcontroller, or state machine.
  • a processor may also be implemented as a combination of computing components, e.g., a combination of a DSP and a microprocessor, a plurality of microprocessors, one or more microprocessors in conjunction with a DSP core, or any other such configuration.
  • a software module may reside in RAM memory, flash memory, ROM memory, EPROM memory, EEPROM memory, registers, hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.
  • a storage medium may be coupled to the processor such that the processor can read information from, and write information to, the storage medium. In the alternative, the storage medium may be integral to the processor.
EP10176421A 2004-09-02 2005-09-02 Verfahren und Vorrichtung für pseudogeheime Schlüsselgenerierung zur Generierung einer Antwort auf eine von einem dienstanbieter empfangene Anfrage Withdrawn EP2254305A1 (de)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US60697104P 2004-09-02 2004-09-02
US11/031,374 US20060046690A1 (en) 2004-09-02 2005-01-06 Pseudo-secret key generation in a communications system
EP05796375A EP1805962A1 (de) 2004-09-02 2005-09-02 Verfahren und vorrichtung für pseudogeheime schlüsselgenerierung zur generierung einer antwort auf eine von einem dienstanbieter empfangene anfrage

Related Parent Applications (1)

Application Number Title Priority Date Filing Date
EP05796375.3 Division 2005-09-02

Publications (1)

Publication Number Publication Date
EP2254305A1 true EP2254305A1 (de) 2010-11-24

Family

ID=35501886

Family Applications (2)

Application Number Title Priority Date Filing Date
EP10176421A Withdrawn EP2254305A1 (de) 2004-09-02 2005-09-02 Verfahren und Vorrichtung für pseudogeheime Schlüsselgenerierung zur Generierung einer Antwort auf eine von einem dienstanbieter empfangene Anfrage
EP05796375A Withdrawn EP1805962A1 (de) 2004-09-02 2005-09-02 Verfahren und vorrichtung für pseudogeheime schlüsselgenerierung zur generierung einer antwort auf eine von einem dienstanbieter empfangene anfrage

Family Applications After (1)

Application Number Title Priority Date Filing Date
EP05796375A Withdrawn EP1805962A1 (de) 2004-09-02 2005-09-02 Verfahren und vorrichtung für pseudogeheime schlüsselgenerierung zur generierung einer antwort auf eine von einem dienstanbieter empfangene anfrage

Country Status (8)

Country Link
US (1) US20060046690A1 (de)
EP (2) EP2254305A1 (de)
JP (2) JP2008512068A (de)
KR (1) KR100987899B1 (de)
CA (1) CA2579272C (de)
MY (1) MY166025A (de)
TW (1) TW200629854A (de)
WO (1) WO2006029051A1 (de)

Families Citing this family (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070043947A1 (en) * 2005-08-19 2007-02-22 Mizikovsky Semyon B Providing multimedia system security to removable user identity modules
US8478988B2 (en) 2007-05-15 2013-07-02 At&T Intellectual Property I, L.P. System and method for authentication of a communication device
US8423789B1 (en) 2007-05-22 2013-04-16 Marvell International Ltd. Key generation techniques
WO2009004508A1 (en) * 2007-06-29 2009-01-08 Nxp B.V. Method for cryptographic authentication
US8265593B2 (en) * 2007-08-27 2012-09-11 Alcatel Lucent Method and system of communication using extended sequence number
US7957533B2 (en) * 2007-10-02 2011-06-07 Alcatel-Lucent Usa Inc. Method of establishing authentication keys and secure wireless communication
US8428554B2 (en) * 2007-10-04 2013-04-23 Alcatel Lucent Method for authenticating a mobile unit attached to a femtocell that operates according to code division multiple access
US8379854B2 (en) * 2007-10-09 2013-02-19 Alcatel Lucent Secure wireless communication
US8793497B2 (en) * 2008-05-09 2014-07-29 Qualcomm Incorporated Puzzle-based authentication between a token and verifiers
JP4792135B2 (ja) * 2008-06-06 2011-10-12 テレフオンアクチーボラゲット エル エム エリクソン（パブル） 暗号鍵の生成
KR101234902B1 (ko) * 2011-11-25 2013-02-19 인하대학교 산학협력단 음향 주파수 분석을 이용한 스마트폰 사용자 인증 방법
TWI451741B (zh) * 2012-03-19 2014-09-01 Chiou Haun Lee 以ｘｏｒ運算於三方通訊之加解密方法
US9215076B1 (en) * 2012-03-27 2015-12-15 Amazon Technologies, Inc. Key generation for hierarchical data access
US8892865B1 (en) 2012-03-27 2014-11-18 Amazon Technologies, Inc. Multiple authority key derivation
US10547443B2 (en) 2017-05-24 2020-01-28 Red Hat, Inc. Session key exchange as a service

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5991407A (en) * 1995-10-17 1999-11-23 Nokia Telecommunications Oy Subscriber authentication in a mobile communications system
EP1001570A2 (de) * 1998-11-09 2000-05-17 Lucent Technologies Inc. Effiziente Authentifizierung mit Schlüsselaktualisierung
US20030235305A1 (en) * 2002-06-20 2003-12-25 Hsu Raymond T. Key generation in a communication system

Family Cites Families (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5148485A (en) * 1990-07-20 1992-09-15 Ericsson Ge Mobile Communications Holding, Inc. Encrypton system for digital cellular communications
US5153919A (en) * 1991-09-13 1992-10-06 At&T Bell Laboratories Service provision authentication protocol
US5537474A (en) * 1994-07-29 1996-07-16 Motorola, Inc. Method and apparatus for authentication in a communication system
FI106605B (fi) * 1997-04-16 2001-02-28 Nokia Networks Oy Autentikointimenetelmä
US6584310B1 (en) * 1998-05-07 2003-06-24 Lucent Technologies Inc. Method and apparatus for performing authentication in communication systems
US6201871B1 (en) * 1998-08-19 2001-03-13 Qualcomm Incorporated Secure processing for authentication of a wireless communications device
FR2788914B1 (fr) * 1999-01-22 2001-03-23 Sfr Sa Procede d'authentification, avec etablissement d'un canal securise, entre un abonne et un fournisseur de services accessible via un operateur de telecommunication
US6587680B1 (en) * 1999-11-23 2003-07-01 Nokia Corporation Transfer of security association during a mobile terminal handover
US6640303B1 (en) * 2000-04-28 2003-10-28 Ky Quy Vu System and method for encryption using transparent keys
JP2002232962A (ja) * 2001-02-07 2002-08-16 Kddi Corp 移動通信認証インターワーキング方式
DE10307403B4 (de) * 2003-02-20 2008-01-24 Siemens Ag Verfahren zum Bilden und Verteilen kryptographischer Schlüssel in einem Mobilfunksystem und Mobilfunksystem
US7908484B2 (en) * 2003-08-22 2011-03-15 Nokia Corporation Method of protecting digest authentication and key agreement (AKA) against man-in-the-middle (MITM) attack
US8351914B2 (en) * 2003-08-29 2013-01-08 Sony Mobile Communications Ab Method and system for registration of licensed modules in mobile devices

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5991407A (en) * 1995-10-17 1999-11-23 Nokia Telecommunications Oy Subscriber authentication in a mobile communications system
EP1001570A2 (de) * 1998-11-09 2000-05-17 Lucent Technologies Inc. Effiziente Authentifizierung mit Schlüsselaktualisierung
US20030235305A1 (en) * 2002-06-20 2003-12-25 Hsu Raymond T. Key generation in a communication system

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
3GPP S3: "Universal Mobile Telecommunications System (UMTS); 3G security; Security architecture (3GPP TS 33.102 version 5.4.0 Release 5); ETSI TS 133 102", ETSI STANDARDS, EUROPEAN TELECOMMUNICATIONS STANDARDS INSTITUTE, SOPHIA-ANTIPO, FR, vol. 3-SA3, no. V540, June 2004 (2004-06-01), pages 1 - 62, XP014017591, ISSN: 0000-0001 *
QUALCOMM: "CDMA 1XRTT Security Overview", WHITEPAPER, August 2002 (2002-08-01), pages 1 - 8, XP002362019, Retrieved from the Internet <URL:http://www.cdg.org/technology/cdma_technology/white_papers/cdma_1x_security_overview.pdf> [retrieved on 20060110] *

Also Published As

Publication number Publication date
EP1805962A1 (de) 2007-07-11
MY166025A (en) 2018-05-21
CA2579272C (en) 2011-06-14
KR20070053796A (ko) 2007-05-25
JP2008512068A (ja) 2008-04-17
WO2006029051A1 (en) 2006-03-16
JP2011234381A (ja) 2011-11-17
CA2579272A1 (en) 2006-03-16
JP5677896B2 (ja) 2015-02-25
TW200629854A (en) 2006-08-16
KR100987899B1 (ko) 2010-10-13
US20060046690A1 (en) 2006-03-02

Similar Documents

Publication Publication Date Title
CA2579272C (en) Method and apparatus for pseudo-secret key generation to generate a response to a challenge received from service provider
JP6492115B2 (ja) 暗号鍵の生成
US7966000B2 (en) Secure bootstrapping for wireless communications
KR101097709B1 (ko) 셀룰러 시스템과 연관된 보안값(들)에 기초하여 무선근거리 네트워크에 대한 액세스를 인증하는 방법
KR20070112260A (ko) Ｓｉｍ/ｕｉｃｃ 키 설정을 위한 네트워크 지원 단말기
EP1121822B1 (de) Authentifikation in einem mobilen kommunikationssystem
US8229398B2 (en) GSM authentication in a CDMA network
CN101228769B (zh) 在通用引导架构（gba）中结合认证偏好来提供移动节点标识的装置、方法和计算机程序产品
Komninos et al. Adaptive authentication and key agreement mechanism for future cellular systems
CN101049000A (zh) 对收自服务提供商的询问生成响应的伪密钥生成方法和装置

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20100913

AC Divisional application: reference to earlier application

Ref document number: 1805962

Country of ref document: EP

Kind code of ref document: P

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU LV MC NL PL PT RO SE SI SK TR

REG Reference to a national code

Ref country code: HK

Ref legal event code: DE

Ref document number: 1144859

Country of ref document: HK

17Q First examination report despatched

Effective date: 20160302

REG Reference to a national code

Ref country code: HK

Ref legal event code: WD

Ref document number: 1144859

Country of ref document: HK

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20180404